Installing Policy JAR Files for SME/KS

Before you can implement security using SME/KS, you must replace the existing policy files. You will download different files based on the version of your JRE and your operating system. See Table 2–1 to determine which JRE is running on your logical hosts.

To download the files, go to the appropriate URL for your operating system and follow the instructions under To Download and Install the Policy Files.

Some governments may allow certain applications to be exempt from cryptographic restrictions, that is, exempt applications may implement stronger encryption than nonexempt applications. For an application to be recognized as exempt at run time, it must meet the following criteria:

• The application must have its policy file bundled with it in a .jar file.

• The .jar file containing the application and the policy file must be signed using a code-signing certificate issued after the application was designated exempt.

To Download and Install the Policy Files

1. Open your browser.

2. Based on your operating system, do one of the following actions:

   • For Solaris, Windows, Linux, HP-UX, and Tru64 (JRE 1.5.0) , go to:

     http://java.sun.com/j2se/1.5.0/download.html

   • For AIX (JRE 1.4.1) , go to:

     http://java.sun.com/products/archive/j2se/1.4.1_07/index.html

3. For Solaris, Windows, Linux, HP-UX, or Tru64, do the following operation:

   1. On the JSE 1.5.0 web page, scroll down to Other Downloads.

   2. Click Download for Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 5.0 and download jse_policy-1_5_0.zip (8.64 kilobytes, including two .jar files each somewhat less than 2500 bytes).

   3. After downloading the archive file, extract the following .jar files:

      • local.policy.jar

      • US_export_policy.jar

   4. For each of your Logical Hosts, replace the existing policy file in the following directory:

       
      Logical Host/jre/lib/security/

4. For AIX, do the following operation:

   1. On the Archive-Java Technology Products Download page, scroll down to Other Downloads.

   2. Click the Download link for Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 1.4.1 and download jce_policy-1.4.1.zip (9.48 kilobytes, contains two files approximately 4300 bytes each).

   3. After downloading the archive file, extract the following .jar files:

      • local.policy.jar

      • US_export_policy.jar

   4. For each of your logical hosts, replace the existing policy files in the following directories:

      • Logical Host/jre/lib/security/

      • Logical Host/jre/1.4.1/security